We are doing some scenario testing and I would like to see if anyone has any insight to my issue.   We have a hub and spoke setup. If one of our spokes had an outbreak of a virus and we needed to shut the VPN tunnels down, but wanted to allow 1 IP address through (leak it), say a printer... is there a way to do that.   So far I have went into the MX device to the firewall and put in a statement allowing only that IP address and then turning the VPN tunnel back on, but when I run an IP scan, I'm seeing more than just that address.   Any direction would help ... View more